MSHTML vulnerability — Defence and Threat Hunting
MSHTML vulnerability defensive approach: telemetry sources, hunting queries, indicators of exploitation and detection rules for SOC teams.
Tag
threat hunting
Read the analysis
Handling the Microsoft Exchange Server cyber attack — why it can be worse than WannaCry
Mass exploitation of ProxyLogon (CVE-2021-26855/26857/26858/27065) on Microsoft Exchange Server: web shell hunting, two distinct intrusion sets observed in Italy, defensive guidance and post-compromise containment.
Cyber Defence: 3 priorities for enterprise security
Three foundational defensive activities every organisation should run continuously: monitoring, detection-engineering and incident response — paired with threat intelligence.
